Privacy policy

This is an English translation for convenience. The legally binding version is the German Datenschutzerklärung.

Protecting your personal data is important to us. In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we inform you below about which data we process when you visit this website, for what purposes and on what legal basis.

1. Controller

U-Mutation GmbH
Sonderburger Straße 13
13357 Berlin, Germany
Represented by the managing director: Andreas Bucher
Phone: +49 30 62409220
Email: info@u-mutation.com

2. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, in data centres in Germany. We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR.

When you access the website, the web server automatically records the following data in server log files:

This processing is technically necessary to deliver the website and to ensure stable and secure operation. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely and without errors. STRATO anonymises IP addresses in the log files. Log files are deleted after six weeks at the latest.

3. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

4. No cookies, no tracking, no third-party services

This website does not set cookies and does not access information on your device beyond what is strictly necessary to display the website (Section 25 TDDDG). We do not use analytics or tracking tools or social media plugins, and we do not embed third-party content. Fonts are not loaded from external servers.

This website contains links to our product doping.ai (https://doping.ai). When you click them, you leave this website; processing on doping.ai is governed by its own privacy policy. No data is transferred to doping.ai before you click.

5. Contact form and contact by email or phone

If you contact us via the contact form, by email or by phone, we process the data you provide (name, email address, company and phone number if applicable, and the content of your message) in order to handle and respond to your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract; otherwise Art. 6(1)(f) GDPR, our legitimate interest being the effective handling of enquiries.

Data submitted via the contact form is transmitted to our server in encrypted form and forwarded to us by email. We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations apply (in particular under Section 257 HGB and Section 147 AO, e.g. for business correspondence).

Providing your data is not required by law or contract. However, we cannot process your enquiry without the information marked as required.

6. Recipients and transfers to third countries

We do not share your data with third parties, except for our technical service provider, which we use as a processor pursuant to Art. 28 GDPR:

Your data is not transferred to countries outside the EU or the EEA.

7. Your rights

With regard to your personal data, you have the following rights:

To exercise your rights, an informal message to the contact details above is sufficient.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

8. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

9. Status of this privacy policy

Last updated: October 2026. We will update this privacy policy whenever the website or the legal requirements change.